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REMARKS 

The Applicants thank the Examiner for his examination of the present 
application. By way of summary, Claims 56-70, 77-83, 87-94, 96, and 98-147 were 
pending in this application. By this amendment, Applicants have amended Claims 56, 
63, 77, 87, and 127, and added new Claims 148-151. Accordingly, Claims 56-70, 77- 
83, 87-94, 96, and 98-151 are pending for consideration. 

The Office Action rejected the claims under 35 U.S.C. §103. Applicants 
respectfully disagree with the rejections for at least the reasons set forth below. 
Rejection of Claims 56-70, 77-83, 87-94, 96, and 98-147 under 35 U.S.C. § 103 

Claims 56-70, 77-83, 87-94, 96, and 98-147 were rejected under 35 U.S.C. 
§ 103 as being obvious over U.S. Pat. No. 5,805,803 to Birrell et al. ("BirreH") in view of 
U.S. Pat. No. 6,092,196 to Reiche ("Reiche") and U.S. Pat. No. 6,122,670 to Bennett et 
al. ("Bennett"). However, for at least the reasons presented below, Birrell, Reiche, and 
Bennett, alone or in combination with other art of record, do not teach or render obvious 
all the limitations of the claims. 

Regarding Claim 56, the cited art does not teach or render obvious at least 
"upon determining that the portable communication device is not to be provided with 
access to the network resource, redirecting the portable communication device to an 
authentication system, by" "receiving, from the redirection server, redirection data 
comprising resource identification data that identifies the authentication system, the 
redirection data configured to cause the portable communication device to be 
redirected to the authentication system" and "sending, from the communications port of 
the network management system to the portable communication device, a browser 
redirect message based upon the redirection data, the browser redirect message 
configured to indicate that it was sent by the network resource," as recited in Claim 56. 

Birrell relates to "securely accessing private systems via a public network." Col. 1 
//. 6-7. Birrell teaches that "Initially, the client computer connected to the Internet makes 
a request for a resource of the intranet in a public message to a redirector of the 
tunnel." Col. 2 //. 28-30. Birrell further teaches that "The redirector 142, in a public 
response 320, responds with a message 202. The message 202 is intended to redirect 
the browser 111 to communicate with the proxy server 143 using a secure protocol, 
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e.g., HTTPS, in further communications." Col. 4 //. 13-17. However, Birrell does not 
teach or render obvious at least "upon determining that the portable communication 
device is not to be provided with access to the network resource, redirecting the 
portable communication device to an authentication system, by" "receiving, from the 
redirection server, redirection data comprising resource identification data that identifies 
the authentication system, the redirection data configured to cause the portable 
communication device to be redirected to the authentication system" and "sending, from 
the communications port of the network management system to the portable 
communication device, a browser redirect message based upon the redirection data, 
the browser redirect message configured to indicate that it was sent by the network 
resource." 

Reiche relates to "a data network featuring an improved authentication and 
access control functions." Col. 1 //. 27-29. Reiche teaches that "When a user is desirous 
to access a resource on a given customer server, say through HTTP data exchange 
session, the browser on the user's machine makes a first contact with the customer 
server." Col. 4 //. 54-57. Reiche further teaches that "The transaction ID is stored in a 
database in the customer server and it is also encoded and sent to the user along with 
a redirect request to the central authentication server." However, Reiche does not teach 
or render obvious at least "upon determining that the portable communication device is 
not to be provided with access to the network resource, redirecting the portable 
communication device to an authentication system, by" "receiving, from the redirection 
server, redirection data comprising resource identification data that identifies the 
authentication system, the redirection data configured to cause the portable 
communication device to be redirected to the authentication system" and "sending, from 
the communications port of the network management system to the portable 
communication device, a browser redirect message based upon the redirection data, 
the browser redirect message configured to indicate that it was sent by the network 
resource." 

Bennett relates to "constructing data packets for transmission between 
computers in a system of computer networks." Col. 1 //. 24-26. However, Bennett does 
not teach or render obvious at least "upon determining that the portable communication 
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device is not to be provided with access to the network resource, redirecting the 
portable communication device to an authentication system, by" "receiving, from the 
redirection server, redirection data comprising resource identification data that identifies 
the authentication system, the redirection data configured to cause the portable 
communication device to be redirected to the authentication system" and "sending, from 
the communications port of the network management system to the portable 
communication device, a browser redirect message based upon the redirection data, 
the browser redirect message configured to indicate that it was sent by the network 
resource." 

For at least the foregoing reasons, the cited art does not teach or render obvious 
all the limitations of Claim 56. Accordingly, Applicants respectfully request that the 
rejection be withdrawn. 

Claims 57-62 and 102-111, which depend from Claim 56, are patentable for the 
reasons recited above with respect to Claim 56, and by reason of the additional 
features recited in each dependent claim. 

Claim 63 is patentable because the cited art does not teach or render obvious at 
least "the processor further configured to redirect the portable communication device to 
an authentication system, upon determining not to allow the portable communication 
device to access the network resource, by" "receiving, from the redirection server, 
redirection data comprising resource identification data that identifies the authentication 
system, the redirection data configured to cause the portable communication device to 
be redirected to the authentication system" and "sending, to the portable 
communication device, a browser redirect message based upon the redirection data, 
the browser redirect message indicating it originated from the network resource," as 
recited in Claim 63. 

Claims 64-70 and 112-117, which depend from Claim 63, are patentable for the 
reasons recited above with respect to Claim 63, and by reason of the additional 
features recited in each dependent claim. 

Claim 77 is patentable because the cited art does not teach or render obvious at 
least "receiving, from a redirection server, redirection data comprising resource 
identification data that identifies an authentication system, the redirection data 
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configured to cause the portable communication device to be redirected to the 
authentication system" and "sending, from the communications port of the network 
management system to the portable communication device, a browser redirect 
message based upon the redirection data, the browser redirect message configured to 
indicate that it was sent by the network resource, the browser redirect message being 
sent upon a determination not to provide the portable communication device with 
access to the network resource," as recited in Claim 77. 

Claims 78-83, 100-101, and 118-132, which depend from Claim 77, are 
patentable for the reasons recited above with respect to Claim 77, and by reason of the 
additional features recited in each dependent claim. 

Claim 87 is patentable because the cited art does not teach or render obvious at 
least "receiving, from a redirection server, redirection data comprising resource 
identification data that identifies the authentication system, the redirection data 
configured to cause the portable communication device to be redirected to the 
authentication system" and "sending, from the network communications interface of the 
network management system to the portable communication device, a browser redirect 
message based upon the redirection data, the browser redirect message indicating it 
originated from the network resource, the browser redirect message being sent as a 
result of the determination not to allow the portable communication device to access the 
network resource," as recited in Claim 87. 

Claims 88-94, 96, 98-99, and 133-147, which depend from Claim 87, are 
patentable for the reasons recited above with respect to Claim 87, and by reason of the 
additional features recited in each dependent claim. 
No Disclaimers or Disavowals 

Although the present communication may include alterations to the application or 
claims, or characterizations of claim scope or referenced art, Applicant is not conceding 
in this application that previously pending claims are not patentable over the cited 
references. Rather, any alterations or characterizations are being made to facilitate 
expeditious prosecution of this application. Applicant reserves the right to pursue at a 
later date any previously pending or other broader or narrower claims that capture any 
subject matter supported by the present disclosure, including subject matter found to be 
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specifically disclaimed herein or by any prior prosecution. Accordingly, reviewers of this 
or any parent, child or related prosecution history shall not reasonably infer that 
Applicant has made any disclaimers or disavowals of any subject matter supported by 
the present application. 

Please charge any additional fees, including any fees for additional extension of 
time, or credit overpayment to Deposit Account No. 11-141 0. 



Respectfully submitted, 
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